Mercury
Policy / Risk ManagerStrategicAug 6, 2026

Prioritize safe account-recovery assurance outcomes

Account recovery becomes difficult when the person seeking access may also be the person who lost control of it.

Teams often have to protect continuity for legitimate businesses without treating familiarity as proof.

Payroll is tomorrow, and proving I’m me feels harder than running the company.

Bernhard Fischer · Co-founder and COO

Shares financial administration with a departed co-founder whose phone number remains tied to account access.

What pulls against what

  • account continuity vs. takeover resistance
  • thin evidence vs. durable policy
  • uniform assurance vs. contextual recovery
  • support consistency vs. investigative flexibility

What is at stake

Recovery friction can leave legitimate founders unable to act, but weak recovery can hand control to the wrong person. The first decision is what outcome to optimize

Why Mercury

At Mercury, this can matter because account access can be directly tied to urgent business payments.

Written for

Risk strategistIdentity policy practitionerEvidence-led controls designer

This is the setup. The work is inside.

Running it puts you in the room: the full situation and its constraints, stakeholders who push back in their own words, and the decisions that are yours to make. What you produce becomes a Day One Plan — work you can show someone instead of describing.